Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker needs to edit the local configuration file to contain malicious code, then send the request to the server to exploit this vulnerability.
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain administrator privileges.
Security updates
22.0.64727 — http://support.microsoft.com/kb/5042528
23.0.22561 — http://support.microsoft.com/kb/5042529
24.0.22865 — http://support.microsoft.com/kb/5042530
Vulnerabilities 1
-
High 8.8
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Revision history
-
#2
Updated the build numbers. This is an informational update only.
-
#1
Information published.
References
-
CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38225
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss